Remove broad `PassRole` permission from operations IAM role #2537

Job	Run time
Build base env	13m 53s
Unit test functions	32s
Unit test coverage report	4s
Terraform plan	2m 4s
Terraform apply	2m 31s
Push docker images	2m 51s
Restart services	6m 8s
Terraform destroy	26m 34s
Clean up remaining resources	39s
	55m 16s

Provide feedback